Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
File: Xdczb6kVchzjv-4hf06ZFk25Uys.mft (raw, json)
Hash identifier: hvRQ6LyDPO/Br1alIgeHlmJnC4nr4mKBENSTyh3onAY=
Subject key identifier: 11:B2:3D:2B:10:CF:D9:15:33:B6:7E:4C:4E:CE:08:1E:C7:D3:89:99
Authority key identifier: 5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
Certificate issuer: /CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Certificate serial: 0195E0B460A219C7B786B80C9F126DC9890A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 07:01:12 +0000
Manifest this update: Sat 29 Mar 2025 07:01:12 +0000
Manifest next update: Sun 30 Mar 2025 07:01:12 +0000
Files and hashes: 1: TBZUFVuLjgaJ-XADpnEKR7pLEmo.roa (hash: DDp1P+ue/jG2hxWSfwXECX5hRH8hg4KzLSyGRRpINWI=)
2: Xdczb6kVchzjv-4hf06ZFk25Uys.crl (hash: fwMuLr+lmuVX8lxZeXGquigLTQNFwh2bWjhC1DpGRR8=)
3: r2ZORJxSeCIu6eCO87hDb9jfS0s.roa (hash: kW/Le+50yBjcga1Wh8Y1h6UD2loMcqNEMFpy4Zq+anY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:60:a2:19:c7:b7:86:b8:0c:9f:12:6d:c9:89:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd7336fa915721ce3bfee217f4e99164db9532b
Validity
Not Before: Mar 29 07:01:12 2025 GMT
Not After : Mar 30 07:01:12 2025 GMT
Subject: CN=11b23d2b10cfd91533b67e4c4ece081ec7d38999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:99:7c:7a:a7:26:34:01:6f:3c:ee:ac:58:
5e:e0:ca:bd:5e:49:eb:ea:28:36:c9:f1:a4:a6:95:
18:36:45:58:7e:73:41:20:16:f4:91:7c:d8:65:6c:
7e:e0:91:9f:8f:49:ed:a7:df:86:8d:24:63:eb:c6:
dc:44:1f:c8:0f:d3:ce:5a:fd:e3:ce:60:c0:72:a3:
40:1b:1e:30:ed:81:aa:b0:85:36:56:e5:ef:51:88:
1e:29:76:b7:b3:b4:12:3b:11:72:ba:5c:20:1b:4e:
a4:45:f2:da:37:9c:1c:4d:df:49:e3:f1:57:3d:83:
d1:25:2b:95:5b:c2:f7:5d:cc:82:a3:ff:82:c9:4c:
36:c9:0d:dd:6f:b1:a1:d7:c4:40:ea:8f:d9:52:31:
61:8f:a0:62:93:05:9f:e8:76:1d:c2:af:3e:5c:56:
0a:2f:b4:d9:4d:7a:cc:40:40:e1:1f:ce:3c:c4:f1:
70:a4:07:7f:df:35:fb:72:de:b0:75:44:13:4d:f5:
3f:9a:ac:77:15:e5:2f:44:32:dc:11:4f:59:12:cb:
d6:bd:f6:52:0c:d1:ff:c0:c0:91:4d:93:e3:c3:57:
04:4e:20:1d:82:de:76:4f:99:fa:42:fa:7c:e0:29:
6c:d5:08:fe:0a:6d:44:68:40:30:75:b1:58:af:72:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B2:3D:2B:10:CF:D9:15:33:B6:7E:4C:4E:CE:08:1E:C7:D3:89:99
X509v3 Authority Key Identifier:
keyid:5D:D7:33:6F:A9:15:72:1C:E3:BF:EE:21:7F:4E:99:16:4D:B9:53:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdczb6kVchzjv-4hf06ZFk25Uys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e744bd-f6d9-4f74-8c01-8c4bc45927a3/1/Xdczb6kVchzjv-4hf06ZFk25Uys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:61:26:b8:13:77:09:66:2e:3e:bf:06:f7:16:9a:7b:4b:c5:
70:b6:51:ae:83:12:75:79:8b:da:b9:5d:1a:19:9a:80:73:58:
61:0f:10:5a:7c:4c:ba:3f:ea:46:ae:fb:3d:65:19:d9:86:c3:
7b:ab:85:01:4a:48:ac:03:cd:91:d3:59:6f:54:00:20:fd:be:
a6:ec:52:9e:2a:a9:1c:0e:3c:c6:66:51:e8:de:e8:b3:60:62:
48:99:38:28:31:60:19:e6:dd:0d:85:d7:55:c6:ab:25:fd:9b:
10:8a:65:7d:f2:e1:a8:a5:17:7d:af:03:26:c0:cb:a7:25:82:
83:11:4e:48:ae:69:42:ab:2b:b2:ec:2e:48:d3:22:68:23:f3:
33:a6:6a:11:21:97:6d:f4:95:08:65:62:f8:93:29:4b:25:53:
db:69:49:96:65:74:20:f6:f3:0f:57:c5:60:7b:ff:88:74:52:
0b:9b:e5:1e:f1:f3:46:9f:ec:95:f5:a6:e7:ee:09:45:0c:e3:
41:0f:bc:2a:eb:ba:38:fc:69:35:fc:77:6d:04:b1:17:66:7c:
ae:56:70:ba:74:f9:53:bb:4d:7e:df:1d:ca:cb:4c:30:fa:50:
91:28:38:0d:b4:eb:02:a0:58:4a:bf:2c:c8:d7:0d:03:7b:d3:
bc:01:60:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:38 2025 by rpki-client